Applying A Filter And Factory Defaults; Ethernet Traffic; Figure 8-16 Protocol And Device Filter Sets; Figure 8-17 Filtering Ethernet Traffic - ZyXEL Communications Prestige 645R User Manual

filters to the "native" IP address and port number before NAT/SUA for outgoing packets and after
NAT/SUA for incoming packets. On the other hand, the generic, or device filters are applied to the raw
packets that appear on the wire. They are applied at the point when the Prestige is receiving and sending the
packets; i.e. the interface. The interface can be an Ethernet, or any other hardware port. The following
diagram illustrates this.
8.6

Applying a Filter and Factory Defaults

This section shows you where to apply the filter(s) after you design it (them). Six sets of factory default
filter rules have been configured in menu 21 to prevent NetBIOS traffic from triggering calls, prevent
incoming telnetting, forward PPPoE packets, and prevent incoming FTP and HTTP.

8.6.1 Ethernet traffic

You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain packets,
reduce traffic and prevent security breaches. Go to menu 3.1 (shown below) and enter the number(s) of the
filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by
entering their numbers separated by commas, for example, 2, 4, 7, 9. The Prestige does not have any of the
default filters applied to the Ethernet port when it is shipped.
Filter Configuration

Figure 8-16 Protocol and Device Filter Sets

Menu 3.1 - General Ethernet Setup
Input Filter Sets:
protocol filters=
device filters=
Output Filter Sets:
protocol filters=
device filters=
Press ENTER to Confirm or ESC to Cancel:

Figure 8-17 Filtering Ethernet traffic

Prestige 645 ADSL Internet Access Router
8-19